PT-2024-11181 · Linux +4 · Linux Kernel +4

🗓️ 01 Jun 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 7 Views

Resolved use after free in Linux kernel when transport security context is freed after offload.

Reporter	Title	Published	Views	Family All 17238
BDU FSTEC	The vulnerability of the net/vmw_vsock/virtio_transport_common.c component in the Linux operating system allows a hacker to trigger a service failure.	28 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the enic_hard_start_xmit() function in the Linux operating system allows a hacker to trigger a service failure.	28 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nbd_disconnect_and_put() function in the /drivers/block/nbd.c component of the Linux kernel allows a hacker to cause a service failure.	28 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows a hacker to trigger a service failure.	28 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the fs/cifs/smb2ops.c component in the Linux operating system allows a hacker to cause a service failure.	28 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the net_openvswitch/actions.c component of the Linux operating system allows a hacker to cause a service failure.	28 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the `drivers/usb/dwc3/core.c` component of the Linux operating system allows a hacker to cause a service failure.	28 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to insufficient checking of unusual or exceptional states, allows a perpetrator to trigger a service failure.	28 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nf_tables module of the netfilter component in Linux kernel allows a hacker to cause a service failure.	6 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the igc_clean_tx_ring() function in the drivers/net/ethernet/intel/igc/igc_main.c file of the Linux kernel’s Ethernet adapter support driver allows a attacker to cause a service failure.	17 Mar 202500:00	–	bdu_fstec

Source	Link
bdu	www.bdu.fstec.ru/vul/2025-00824
ubuntu	www.ubuntu.com/security/notices/USN-6924-2
osv	www.osv.dev/vulnerability/SUSE-SU-2024:1643-1
ubuntu	www.ubuntu.com/security/CVE-2024-38583
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/CVE-2024-33621
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/CVE-2024-27399
bdu	www.bdu.fstec.ru/vul/2024-03621

27 Feb 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.8 - 9.8

CVSS 24.6

EPSS0.08555

SSVC